RE: SBS 2003 VPN error 720
- From: v-crinal@xxxxxxxxxxxxxxxxxxxx ("Crina Li")
- Date: Tue, 08 Aug 2006 07:53:47 GMT
Hi Emmanuel,
Thanks for your update.
From the description, I understand the issue to be: you have created VPNfrom remote client to SBS, however you have encountered some issue when the
remote client browse resource of SBS. And the remote client can access
sever resource if you type the path of the resource. If I have
misunderstood your concerns, please do not hesitate to let me know.
As I know, you need to configure remote site in the different subnet with
SBS LAN. To narrow down the problem, would you please help me collect the
following information?
1. Does the situation occur on LAN of SBS?
2. Get the ipconfig/all result from VPN client computer and SBS.
3. Do you have ISA installed on SBS?
Currently please check the following steps to see how thing goes:
1. Make sure that you have selected Enable NetBIOS over TCP/IP on the
remote computer and SBS as following:
1) Right click My Network Places and select Properties.
2) Right click Local Area Connection (client computer)/Network Connection
(server) and select Properties.
3) Click Internet Protocol (TCP/IP) and high light it. Click Properties.
4) On the General tab, click Advanced. Go to WINS tab.
5) Make sure that you select Enable NetBIOS over TCP/IP.
6) Click OK twice and close all the windows.
For detailed information, please refer to the following KB article:
827603 Remote users cannot see a Windows Small Business Server 2003
computer in
http://support.microsoft.com/?id=827603
318030 You cannot access shared files and folders or browse computers in
the
http://support.microsoft.com/?id=318030
2. Make sure the TCP/IP NetBIOS Helper service and the Server service and
the Workstation service are running on SBS and remote client. You may check
them through running Services.msc.
3. Check Computer Browser on SBS and client computers:
1) Open Services console in the SBS Administrative Tools.
2) In the right pane, make sure that the "Computer Browser" service is
started and the startup type is "Automatic".
3) Check the same settings on all client computers and make sure that the
"Computer Browser" service is stopped and the startup type is "Disabled".
4. On the remote client, open the LAN connection properties and then make
sure that the Client for Microsoft Networks is selected.
5. Please disable ICF in your remote client. To do so:
1) Click Start, and then click My Network Places.
2) Under Network Tasks, click View Network Connections.
3) Right-click the connection that you use for the Internet, and then click
Properties.
4) Click the Advanced tab.
5) Click to clear the "Protect my computer and network by limiting or
preventing access to this computer from the Internet" check box.
For detailed information, please refer to the following KB article:
298804 Internet firewalls can prevent browsing and file sharing
http://support.microsoft.com/?id=298804
6. Check if "File and Printer Sharing for Microsoft Networks" is installed
on the remote client:
1) Right click My Network Places and select Properties.
2) Right click Network Connection and select Properties.
3) On the General tab, check if you have selected the option of "File and
Printer Sharing for Microsoft Networks".
You may also refer to the following KB article:
314872 Browse List Issues on Servers and Clients Include Error Messages
About
http://support.microsoft.com/?id=314872
7. Please try to uncheck Use default gateway on remote network:
1) Open the manual VPN connection and then click Properties.
2) Click Networking tab, and then high light TCP/IP.
3) Click Properties and then click Advanced.
4) On General tab, uncheck Use default gateway on remote network.
5) Try again.
Also there is a known issue when you are using the ISA Server 2000 on the
SBS Server. If that is the case, please call PSS to obtain and apply the
hotfix to see if the problem can be resolved:
897651 VPN clients can no longer access internal resources after you
install Windows Server 2003 Service Pack 1 on a computer that is running
ISA Server 2000
http://support.microsoft.com/default.aspx?scid=kb;EN-US;897651
You may also need to check the configuration on SBS:
For one Nic, you need to configure on SBS server and client computer as
following:
IP: Fixed IP address
Gateway: your Hardware router IP
DNS: SBS NIC IP as the only entry
In the DNS console (dnsmgmt.msc), right click your ServerName and click
properties. In the Forwarders tab, your ISP DNS server IP should be
inputted there.
On the client workstation, please make sure the configuration:
IP: Assigned by DHCP on SBS or your hardware router
Gateway: hardware router
DNS: SBS INTERNAL NIC IP as the only entry
I appreciate your time and look forward to hearing from you.
Best regards,
Crina Li (MSFT)
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.
Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.
For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| Thread-Topic: SBS 2003 VPN error 720
| thread-index: Aca6L6UiX8QTCoC3Qp+itkCDliQoeQ==
| X-WBNR-Posting-Host: 81.164.193.183
| From: =?Utf-8?B?RW1tYW51ZWxEZVNtZXQ=?=
<EmmanuelDeSmet@xxxxxxxxxxxxxxxxxxxxxxxxx>
| References: <66B0AEC0-4D23-4FEF-A965-CC960261DA1B@xxxxxxxxxxxxx>
<9oLhbm3tGHA.5840@xxxxxxxxxxxxxxxxxxxxx>
<4515121E-C153-4C6C-AEB6-14187C5AE698@xxxxxxxxxxxxx>
<acdpoqfuGHA.3920@xxxxxxxxxxxxxxxxxxxxx>
| Subject: RE: SBS 2003 VPN error 720
| Date: Mon, 7 Aug 2006 07:42:02 -0700
| Lines: 284
| Message-ID: <113F0BCF-0EE5-4E62-A155-35F36AC407F4@xxxxxxxxxxxxx>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.1830
| Newsgroups: microsoft.public.windows.server.sbs
| Path: TK2MSFTNGXA01.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:287599
| NNTP-Posting-Host: TK2MSFTNGXA01.phx.gbl 10.40.2.250
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| Forgot to say I'm using SBS2003 with 1 NIC and external hardware router.
|
| ""Crina Li"" wrote:
|
| > Hi Emmanuel,
| >
| > Thanks for your update.
| >
| > I am glad to hear the problem is resolved.
| >
| > It is my pleasure to work with you in this post. If you encounter any
| > difficulties in the future, please submit the post to the newsgroup.
We
| > are glad to be of the assistance.
| >
| > Again, thank you for using Microsoft newsgroup. Have a nice day. :)
| >
| > Best regards,
| >
| > Crina Li (MSFT)
| >
| > Microsoft CSS Online Newsgroup Support
| >
| > Get Secure! - www.microsoft.com/security
| >
| > =====================================================
| > This newsgroup only focuses on SBS technical issues. If you have issues
| > regarding other Microsoft products, you'd better post in the
corresponding
| > newsgroups so that they can be resolved in an efficient and timely
manner.
| > You can locate the newsgroup here:
| > http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
| >
| > When opening a new thread via the web interface, we recommend you check
the
| > "Notify me of replies" box to receive e-mail notifications when there
are
| > any updates in your thread. When responding to posts via your
newsreader,
| > please "Reply to Group" so that others may learn and benefit from your
| > issue.
| >
| > Microsoft engineers can only focus on one issue per thread. Although we
| > provide other information for your reference, we recommend you post
| > different incidents in different threads to keep the thread clean. In
doing
| > so, it will ensure your issues are resolved in a timely manner.
| >
| > For urgent issues, you may want to contact Microsoft CSS directly.
Please
| > check http://support.microsoft.com for regional support phone numbers.
| >
| > Any input or comments in this thread are highly appreciated.
| >
| > =====================================================
| >
| > This posting is provided "AS IS" with no warranties, and confers no
rights.
| > --------------------
| > | Thread-Topic: SBS 2003 VPN error 720
| > | thread-index: Aca4usnBzfXW6gRIRoCs7rLHohjS4Q==
| > | X-WBNR-Posting-Host: 81.164.193.183
| > | From: =?Utf-8?B?RW1tYW51ZWxEZVNtZXQ=?=
| > <EmmanuelDeSmet@xxxxxxxxxxxxxxxxxxxxxxxxx>
| > | References: <66B0AEC0-4D23-4FEF-A965-CC960261DA1B@xxxxxxxxxxxxx>
| > <9oLhbm3tGHA.5840@xxxxxxxxxxxxxxxxxxxxx>
| > | Subject: RE: SBS 2003 VPN error 720
| > | Date: Sat, 5 Aug 2006 11:13:01 -0700
| > | Lines: 171
| > | Message-ID: <4515121E-C153-4C6C-AEB6-14187C5AE698@xxxxxxxxxxxxx>
| > | MIME-Version: 1.0
| > | Content-Type: text/plain;
| > | charset="Utf-8"
| > | Content-Transfer-Encoding: 7bit
| > | X-Newsreader: Microsoft CDO for Windows 2000
| > | Content-Class: urn:content-classes:message
| > | Importance: normal
| > | Priority: normal
| > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.1830
| > | Newsgroups: microsoft.public.windows.server.sbs
| > | Path: TK2MSFTNGXA01.phx.gbl
| > | Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:287266
| > | NNTP-Posting-Host: TK2MSFTNGXA01.phx.gbl 10.40.2.250
| > | X-Tomcat-NG: microsoft.public.windows.server.sbs
| > |
| > | Hello,
| > |
| > | Thanks for your answer.
| > |
| > | Changing from VPN by Connection Manager to VPN manually configured
gave
| > me
| > | Error 733.
| > |
| > | I've found the solution somewhere on the Internet you wrote:
| > |
| > | "Please check to see if you configure the VPN server to obtain
addresses
| > | from DHCP or a static pool: Open Routing and Remote Access, right
click
| > the
| > | VPN server, click Properties, click the IP tab to check it. If you
| > | configure it to get IP address from DHCP server, please select Static
| > | Address Pool, click Add to add an IP range which is different from
your
| > | subnet. After that, check to see if the client can establish the VPN
| > | connection. "
| > |
| > | Finally this was the solution.
| > |
| > | Thank you very much. I've nealry a whole day but I'm very happy
everthing
| > | works, Connection Manager and manually VPN.
| > |
| > | Emmanuel De Smet
| > |
| > |
| > |
| > |
| > | ""Crina Li"" wrote:
| > |
| > | > Hi Emmanuel,
| > | >
| > | > Thank you for posting in SBS newsgroup.
| > | >
| > | > From the description, I understand the issue to be: you want to
create
| > VPN
| > | > from remote client to SBS and you got error 720. If I have
| > misunderstood
| > | > your concerns, please do not hesitate to let me know.
| > | >
| > | > As I know, you may need to follow the steps below to configure VPN
| > access
| > | > on an SBS environment:
| > | >
| > | > 1. Run CEICW, follow the wizard and select Enable firewall and then
| > make
| > | > sure Virtual Private Networking (VPN) is selected in the Services
| > | > Configuration page. And make sure you have typed the public FQDN of
the
| > SBS
| > | > server on the Web Server Certificate page.
| > | > 2. Run Remote Access Wizard in Server Management\Internet and
| > | > E-mail\Configure Remote Access, and select VPN access in the Remote
| > Access
| > | > Method page. After finishing this wizard, RRAS is configured to
allow
| > | > inbound VPN access, and it can assign IP addresses to the VPN
clients
| > by
| > | > using DHCP.
| > | >
| > | > Note: When we run the remote access wizard to set up the VPN
service,
| > we
| > | > need to input the public IP address or the public FQDN of the SBS
| > server.
| > | > We need to make sure that the address can be accessed from the
internet.
| > | >
| > | > 3. On the VPN client, go to https://publicFQDN/remote, clear I'm
using
| > a
| > | > public or shared computer, log in and download Connection Manager.
| > | > 4. Install Connection Manager on the VPN client.
| > | > 5. Is there a hardware router installed in front of the SBS server?
If
| > so,
| > | > ensure that the port forwarding for TCP 1723 and GRE port (protocol
| > number
| > | > 47) are opened. PPTP VPN is negotiating a connection on TCP port
1723
| > and
| > | > send data to and from the PPTP server using the GRE protocol (IP
| > Protocol
| > | > 47, 0x2F if you are looking in Network Monitor). You should open
port
| > 1723
| > | > on the router and also make sure IP Protocol 47 is allowed.
| > | >
| > | > If the issue still occurs, would you please help me collect the
| > following
| > | > information?
| > | >
| > | > 1. What's the detailed error message?
| > | > 2. Does the issue occur to other VPN clients?
| > | > 3. Do you have a hardware router/firewall in front of the SBS
server?
| > If
| > | > so, make sure TCP port 1723 is open and IP Protocol 47 is allowed.
| > | > 4. How many NICs do you have in the SBS server?
| > | > 5. Try creating a VPN connection from the server to itself. Does
this
| > work?
| > | > 6. Create one VPN connection on an LAN client to the server and see
if
| > that
| > | > works.
| > | >
| > | > Related information:
| > | >
| > | > 314869 Error 720: No PPP Control Protocols Configured
| > | > http://support.microsoft.com/?id=314869
| > | >
| > | > 323441 How To Install and Configure a Virtual Private Network
Server in
| > | > Windows
| > | > http://support.microsoft.com/?id=323441
| > | >
| > | > 320697 HOW TO: Turn On and Configure Inbound VPN Access in Small
| > Business
| > | > http://support.microsoft.com/?id=320697
| > | > (The steps also apply to SBS 2003.)
| > | >
| > | > 241251 VPN Tunnels - GRE Protocol 47 Packet Description and Use
| > | > http://support.microsoft.com/?kbid=241251
| > | >
| > | > I appreciate your time and look forward to hearing from you.
| > | >
| > | > Best regards,
| > | >
| > | > Crina Li (MSFT)
| > | >
| > | > Microsoft CSS Online Newsgroup Support
| > | >
| > | > Get Secure! - www.microsoft.com/security
| > | >
| > | > =====================================================
| > | > This newsgroup only focuses on SBS technical issues. If you have
issues
| > | > regarding other Microsoft products, you'd better post in the
| > corresponding
| > | > newsgroups so that they can be resolved in an efficient and timely
| > manner.
| > | > You can locate the newsgroup here:
| > | > http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
| > | >
| > | > When opening a new thread via the web interface, we recommend you
check
| > the
| > | > "Notify me of replies" box to receive e-mail notifications when
there
| > are
| > | > any updates in your thread. When responding to posts via your
| > newsreader,
| > | > please "Reply to Group" so that others may learn and benefit from
your
| > | > issue.
| > | >
| > | > Microsoft engineers can only focus on one issue per thread.
Although we
| > | > provide other information for your reference, we recommend you post
| > | > different incidents in different threads to keep the thread clean.
In
| > doing
| > | > so, it will ensure your issues are resolved in a timely manner.
| > | >
| > | > For urgent issues, you may want to contact Microsoft CSS directly.
| > Please
| > | > check http://support.microsoft.com for regional support phone
numbers.
| > | >
| > | > Any input or comments in this thread are highly appreciated.
| > | >
| > | > =====================================================
| > | >
| > | > This posting is provided "AS IS" with no warranties, and confers no
| > rights.
| > | > --------------------
| > | > | Thread-Topic: SBS 2003 VPN error 720
| > | > | thread-index: Aca3Hdc7DgD6xfjiTUi2iJL/grJ7kw==
| > | > | X-WBNR-Posting-Host: 81.164.193.183
| > | > | From: =?Utf-8?B?RW1tYW51ZWxEZVNtZXQ=?=
| > | > <EmmanuelDeSmet@xxxxxxxxxxxxxxxxxxxxxxxxx>
| > | > | Subject: SBS 2003 VPN error 720
| > | > | Date: Thu, 3 Aug 2006 09:57:01 -0700
| > | > | Lines: 14
| > | > | Message-ID: <66B0AEC0-4D23-4FEF-A965-CC960261DA1B@xxxxxxxxxxxxx>
| > | > | MIME-Version: 1.0
| > | > | Content-Type: text/plain;
| > | > | charset="Utf-8"
| > | > | Content-Transfer-Encoding: 7bit
| > | > | X-Newsreader: Microsoft CDO for Windows 2000
| > | > | Content-Class: urn:content-classes:message
| > | > | Importance: normal
| > | > | Priority: normal
| > | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.1830
| > | > | Newsgroups: microsoft.public.windows.server.sbs
| > | > | Path: TK2MSFTNGXA01.phx.gbl
| > | > | Xref: TK2MSFTNGXA01.phx.gbl
microsoft.public.windows.server.sbs:286750
| > | > | NNTP-Posting-Host: TK2MSFTNGXA01.phx.gbl 10.40.2.250
| > | > | X-Tomcat-NG: microsoft.public.windows.server.sbs
| > | > |
| > | > | Hello,
| > | > |
| > | > | I'm trying to connect by VPN a WINXP SP2 laptop to SBS 2003
server.
| > I've
| > | > | installed Connection Manager via RWW. RWW OK.
| > | > | But tryin g to connect by VPN O get error code 720 after a few
| > seconds.
| > | > |
| > | > | I've run Remote Connection and Connect to the Internet Wizards
| > several
| > | > times
| > | > | on the SBS server.
| > | > |
| > | > | Anybody an idea ?
| > | > |
| > | > | Thanks in advance,
| > | > |
| > | > | Emmanuel De Smet
| > | > |
| > | >
| > | >
| > |
| >
| >
|
.
- References:
- RE: SBS 2003 VPN error 720
- From: "Crina Li"
- RE: SBS 2003 VPN error 720
- From: EmmanuelDeSmet
- RE: SBS 2003 VPN error 720
- From: "Crina Li"
- RE: SBS 2003 VPN error 720
- From: EmmanuelDeSmet
- RE: SBS 2003 VPN error 720
- Prev by Date: RE: Exchange 2003/Outlook 2003 public folder problem.
- Next by Date: Re: Multiple errors
- Previous by thread: RE: SBS 2003 VPN error 720
- Next by thread: How do you deal with passwords
- Index(es):
Relevant Pages
|
